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TECHNICAL FIELD 

This invention relates to computers and software, and more particularly to 
methods and arrangements that provide a mark-up language based graphical user 
interface (GUI) that can be implemented to identify users to an operating system. 

BACKGROUND OF THE INVENTION 

Computer systems are often protected by a logon program and/or other 
subsequent authentication programs that determine whether a user has permission 
to access certain computer system resources. By way of example, a networked 
computer may require that a user input a valid user name and password before the 
user is allowed to access network resources. Similarly, a Web site on the World 
Wide Web (WWW) portion of the Internet or on an intranet may require a valid 
user ID and password before the user is allowed to gain further access to various 
resources. 

Controlling user access is not limited to networked computers. A single 
computer that is accessed by several users may also need to limit access to files 
and/or various programs therein. Thus, for example, in a home environment, a 
parent may decide to limit a child's access to the computer entirely, certain 
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programs and/or certain data. Similarly, in a business environment, certain users 
may have limited access. 

Controlling access to computers as described above is well known. 
Typically, there is an initial logon program or the like that requests user input, 
receives the user input and determines if the user is allowed access. Once the user 
has been authenticated, then other programs are allowed to operate. For example, 
in a networked operating system environment, during the booting-up of a personal 
computer (PC) or like device connected to the network, the user is typically 
presented with a modal dialog requesting a user name and associated password. In 
this example, the modal dialog is displayed by the network's logon program. For 
a single PC, a logon program associated with the operating system may display a 
similar modal dialog. 

In either case, the modal dialog tends to be tightly integrated within the 
logon program code of the network software and/or operating system software. 
As a result, it is often difficult and expensive to significantly alter the modal 
dialog or otherwise to introduce new functional and nonfunctional features, such 
as those typically associated with conventional graphical user interfaces (GUIs). 

Thus, there is need for improved methods and arrangements that provide 
enriched techniques for identifying users to an operating system. Preferably, the 
methods and arrangements will allow for a more advanced GUI to be presented to 
the user, while also remaining easy for the developer to maintain and modify. 
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SUMMARY OF THE INVENTION 

The present invention includes various methods and arrangements that can 
be implemented to identify users to an operating system through an advanced 
graphical user interface (GUI). The resulting GUI can be visually compelling and 
functional while advantageously remaining easy for the developer to create, 
maintain and modify. 

Thus, for example, the above stated needs and others are met by a method 
that includes arranging for a markup language rendering engine to be loaded 
substantially near the beginning of an operating system initialization procedure, 
and providing markup language code suitable for use with the markup language 
rendering engine. The markup language is capable of soliciting at least one user 
input associated with a user logon process when rendered by the markup language 
rendering engine. 

With the above example in mind, in accordance with certain 
implementations, a logon screen, for example, can be rendered from code written 
in Dynamic HTML (Hypertext Markup Language), extensible Markup Language 
(XML), extensible Hypertext Markup Language (XHTML), Standard Generalized 
Markup Language (SGML), or the like. 

For the logon screen to be most effective upon initializing the computer, 
there will usually be a need to render the associated markup language file(s) early 
during the initialization stage. Accordingly, in certain implementations, the 
markup language rendering engine is loaded very near the beginning of the 
initialization of the operating system. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

A more complete understanding of the various methods and arrangements 
of the present invention may be had by reference to the following detailed 
description when taken in conjunction with the accompanying drawings wherein: 

Fig. 1 is a block diagram depicting an exemplary computer system. 

Fig. 2 depicts an exemplary mark-up language based graphical user 
interface suitable for use in the computer system of Fig. 1 in identifying users to 
the operating system. 

Fig. 3 is a flowchart depicting an exemplary process for identifying users to 
the operating system using a mark-up language based graphical user interface. 

DETAILED DESCRIPTION 

As shown in Fig. 1, computer 20 includes one or more processors or 
processing units 21, a system memory 22, and a bus 23 that couples various 
system components including the system memory 22 to processors 21. Bus 23 
represents one or more of any of several types of bus structures, including a 
memory bus or memory controller, a peripheral bus, an accelerated graphics port, 
and a processor or local bus using any of a variety of bus architectures. 

The system memory includes read only memory (ROM) 24 and random 
access memory (RAM) 25. A basic input/output system (BIOS) 26, containing the 
basic routines that help to transfer information between elements within computer 
20, such as during start-up, is stored in ROM 24. 

Computer 20 further includes a hard disk drive 27 for reading from and 
writing to a hard disk, not shown, a magnetic disk drive 28 for reading from and 
writing to a removable magnetic disk 29, and an optical disk drive 30 for reading 
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from or writing to a removable optical disk 3 1 such as a CD ROM, DVD ROM or 
other optical media. The hard disk drive 27, magnetic disk drive 28 and optical 
disk drive 30 are each connected to bus 23 by applicable interfaces 32, 33 and 34, 
respectively. 

The drives and their associated computer-readable media provide 
nonvolatile storage of computer readable instructions, data structures, program 
modules and other data for computer 20. Although the exemplary environment 
described herein employs a hard disk, a removable magnetic disk 29 and a 
removable optical disk 31, it should be appreciated by those skilled in the art that 
other types of computer readable media which can store data that is accessible by a 
computer, such as magnetic cassettes, flash memory cards, digital video disks, 
random access memories (RAMs) read only memories (ROM), and the like, may 
also be used in the exemplary operating environment. 

A number of program modules may be stored on the hard disk, magnetic 
disk 29, optical disk 31, ROM 24, or RAM 25, including an operating system 35, 
one or more application programs 36, other program modules 37, and program 
data 38. A user may enter commands and information into computer 20 through 
input devices such as keyboard 40 and pointing device 42. Other input devices 
(not shown) may include a microphone, joystick, game pad, satellite dish, scanner, 
or the like. These and other input devices are connected to the processing unit 21 
through an interface 46 that is coupled to bus 23. 

A monitor 47 or other type of display device is also connected to bus 23 via 
an interface, such as a video adapter 48. In addition to the monitor, personal 
computers typically include other peripheral output devices (not shown) such as 
speakers and printers. 
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Computer 20 can operate in a networked environment using logical 
connections to one or more remote computers, such as a remote computer 50. 
Remote computer 50 may be another personal computer, a server, a router, a 
network PC, a peer device or other common network node, and typically includes 
many or all of the elements described above relative to computer 20. The logical 
connections depicted in Fig. 2 include a local area network (LAN) 5 1 and a wide 
area network (WAN) 52. Such networking environments are commonplace in 
offices, enterprise-wide computer networks, intranets, and the Internet. 

When used in a LAN networking environment, computer 20 is connected to 
the local network 51 through a network interface or adapter 156. When used in a 
WAN networking environment, computer 20 typically includes a modem 54 or 
other means for establishing communications over the wide area network 52, such 
as the Internet. Modem 54, which may be internal or external, is connected to bus 
23 via interface 46. In a networked environment, program modules depicted 
relative to the personal computer 20, or portions thereof, may be stored in the 
remote memory storage device. It will be appreciated that the network 
connections shown are exemplary and other means of establishing a 
communications link between the computers may be used. 

Reference is now made to Fig. 2, which depicts an exemplary mark-up 
language based graphical user interface (GUI) display suitable for use in 
identifying users to the operating system of computer 20. Here, a logon screen 
100 is shown as having a first title area 102 that identifies logon screen 100. 
Logon screen 100 may take up be a full screen of display 47 or a portion thereof. 
As shown, first title area 102 can include any graphical feature (e.g., bitmap, 
photo, video, text, etc). 
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Logon screen 100 also includes a single/multiple user logon area 104 
wherein the user is presented with selectable user identifiers and related 
information and permitted to input certain data. In this example, logon area 104 is 
configured for five different users, namely, Billy, Christopher, Pat, Suzie, and 
William; each being identified by a text identifier 110 and graphical identifier 112. 
Thus, William may begin logging on to the operating system by selecting either 
text identifier 110, graphical identifier 112. If William has an established 
password, then a password input field 114 is displayed and configured to receive 
his input (i.e., password). Once William's password has been authenticated then 
William is logged on. If William does not have an established password, then he 
would be logged on after selecting text identifier 1 10 or graphical identifier 112. 

Logon screen 100 can also be configured to display other user related 
information 116 to a user. In this example, user related information 116 identifies 
that Suzie has ten (10) new messages, 

A second title area 106 is shown in this example along the left hand border 
of logon screen 100. Here, second title area 106 identifies the computer as the 
"Den Computer". A selectable shut down mechanism 108 is also provided to 
allow a user to shut down the computer. 

With the above example in mind, in accordance with certain 
implementations, logon screen 100 is a mark-up language based GUI. For 
example, a Dynamic HTML (Hypertext Markup Language) can be used to create 
logon screen 100. Dynamic HTML provides a mechanism to include a wide 
variety of functional as well as non-functional features to logon screen 100. Other 
types of mark-up languages and the like may also be used to define logon screen 
100. For example, extensible Markup Language (XML), extensible Hypertext 
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Markup Language (XHTML) or Standard Generalized Markup Language (SGML) 
may be used. 

For logon screen 100 to be effective upon initializing computer 20, there is 
a need to render the associated markup language file(s) early during the 
initialization stage. Accordingly, a markup language rendering engine (i.e., 
program) is loaded very near the beginning of the initialization of the operating 
system. Such rendering engines are well known. An exemplary markup language 
rendering engine is provided within Microsoft Internet Explorer (IE). 

Dynamic HTML allows developers to create very attractive and colorful 
user interfaces. Thus, logon screen 100 may incorporate graphics and animations 
easily, while scripting complex behaviors, such as defining what happens when a 
user clicks on their name. The logon screen can be multi-layered and scaled to 
work with different resolutions. Additionally, complex graphical visual effects, 
such as, e.g., alpha blending, can be employed to create fades and transparencies 
that would be very difficult to implement in a traditional modal dialog interface. 

By using a markup language and preloading the markup language rendering 
engine in the logon context, developers can advantageously prototype and 
generate dynamic user interfaces quickly and at a lower cost than would be 
required to significantly modify a conventional modal dialog. Thus, conceivably, 
each computer may have its own custom logon screen. 

Having the ability to rapidly create and prototype logon screen designs will 
also make it easy for users to agree on what they like. For example, by changing 
the Cascading Style Sheets (CSS) and Dynamic HTML templates, developers can 
quickly change the logon screen without affecting the logon program code 
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Reference is now made to Fig. 3, which is a flowchart depicting an 
exemplary process 200 for identifying users to the operating system using a mark- 
up language based GUI. 

In step 202, the logon program is initiated. This would occur upon 
rebooting computer 20, for example. Next, in step 204, a separate process, having 
a markup language rendering engine, is spawned to host the markup language 
content. 

In step 206, the separate process retrieves user data from the operating 
system or elsewhere. The user data can include a listing of users, associated text 
identifiers 110, graphical identifiers 112, a password enabled identifier, and 
possibly, a password hint data (if enabled). Next, in step 208, the markup 
language rendering engine displays logon screen 100 along with applicable 
portions of the user data. 

In step 210 the markup language rendering engine collects user inputs. 
This can include user mouse clicks, user typed text, audio commands, and/or other 
acceptable forms of user input. In the example of Fig. 2, William would select text 
identifier 1 10 or graphical identifier 112. Assuming that William has established a 
password (i.e., password is enabled), then he would need to enter his password. 

Next, in step 212, the user inputs (e.g., user name and password) are 
provided to the logon program. In step 214, the logon program attempts to 
authenticate the user. If the user is authenticated, then a user desktop and/or 
workspace is created and subsequently displayed on display 47. If the user is not 
authenticated in step 214, then process 200 would return to either step 208, step 
210, or otherwise handle the failed attempted logon. 
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Process 200 can be implemented, for example, within a Microsoft Windows 
operating system environment using Dynamic HTML and available interfaces. 
Thus, a logon process, known as WinLogon, spawns a separate process to host the 
Dynamic HTML content. When WinLogon launches the separate process, it 
provides a mechanism to communicate with WinLogon so that the HTML 
interface can ask. WinLogon to authenticate the user and start their desktop 
session. The Dynamic HTML code then makes calls to an ActiveX control or like 
applet that communicates with the operating system to determine the list of users, 
the picture to associate with the user, a password hint if one was configured by the 
user and whether the user has a password configured. The user then selects their 
picture or name, for example, and types in their password (if needed), after which 
the HTML code calls the ActiveX control with the user name and password. The 
ActiveX control then passes this information back to WinLogon where the 
authentication takes place. If the user is authenticated, then WinLogon creates the 
user's desktop and switches to it. At this point, the Dynamic HTML process is 
finished. Thereafter, the rendering engine may remain loaded or may be 
terminated. 

Although some preferred embodiments of the various methods and 
arrangements of the present invention have been illustrated in the accompanying 
Drawings and described in the foregoing Detailed Description, it will be 
understood that the invention is not limited to the exemplary embodiments 
disclosed, but is capable of numerous rearrangements, modifications and 
substitutions without departing from the spirit of the invention as set forth and 
defined by the following claims. 
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